Security tools & research

I’m Rand Deeb, a lead software engineer and independent security researcher. I develop systems, applications, websites and portfolios—from a personal site to a complex business platform. My security work includes vulnerability research and custom SAST and DAST tools.

Fig. 01

Hendra · DAST

Hendra — the DAST scanner I designed and built.

For my completed doctoral research at ITMO University, I developed Hendra’s architecture, scan planning, request deduplication, finding verification and evaluation framework. Application context guides which checks the scanner runs.

ITMO
Hendra
Role
Architecture, implementation and evaluation
Explore Hendra’s architecture and results
Hendra vs. Burp Suite Pro · DVWA, low security · controlled run
Burp Suite ProF1 0.929

40,131

HendraF1 0.966

686

58.5×Fewer requests

Recorded in my project research: DVWA at low security, under the tested tool configurations. F1 combines precision and recall. These figures describe this experiment, not a universal ranking or a production performance guarantee.

Selected publications

  1. · IEEEDASTestBed: An Automated Benchmarking Framework for DAST Scanners with Extensible Ground Truth Modeling
  2. · IEEEFeature-Equivalence Deduplication and Memoization of HTTP(S) Requests for Web Scanners: Formal Model, Concurrency, and Complexity Bounds
  3. · ITMO JournalWeakly Supervised Web Technology Identification with Rule-Augmented Machine Learning

08Contact

Let’s solve the next hard problem.

Tell me what you’re building, what is at stake and when you need a result. I’ll discuss the fit and propose a defined scope, deliverables and price.

Discuss your project
LinkedIn